Fix memory leak.
[openssl.git] / crypto / evp / evp_enc.c
index 09f7d7ea5ec16e505bedebb07149cb456127a430..e3ed556f2610dabd1c82aa1daf109ecd737ebc46 100644 (file)
@@ -60,6 +60,9 @@
 #include "cryptlib.h"
 #include <openssl/evp.h>
 #include <openssl/err.h>
+#include "evp_locl.h"
+
+#include <assert.h>
 
 const char *EVP_version="EVP" OPENSSL_VERSION_PTEXT;
 
@@ -72,14 +75,31 @@ void EVP_CIPHER_CTX_init(EVP_CIPHER_CTX *ctx)
 int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
             unsigned char *key, unsigned char *iv, int enc)
        {
-       if(enc) enc = 1;
-       if (cipher) {
+       if(enc && (enc != -1)) enc = 1;
+       if (cipher)
+               {
+               if(ctx->cipher)
+                       EVP_CIPHER_CTX_cleanup(ctx);
                ctx->cipher=cipher;
+               ctx->cipher_data=OPENSSL_malloc(ctx->cipher->ctx_size);
                ctx->key_len = cipher->key_len;
+               ctx->flags = 0;
+               if(ctx->cipher->flags & EVP_CIPH_CTRL_INIT) {
+                       if(!EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_INIT, 0, NULL)) {
+                               EVPerr(EVP_F_EVP_CIPHERINIT, EVP_R_INITIALIZATION_ERROR);
+                               return 0;
+                       }
+               }
        } else if(!ctx->cipher) {
                EVPerr(EVP_F_EVP_CIPHERINIT, EVP_R_NO_CIPHER_SET);
                return 0;
        }
+
+       /* we assume block size is a power of 2 in *cryptUpdate */
+       assert(ctx->cipher->block_size == 1
+              || ctx->cipher->block_size == 8
+              || ctx->cipher->block_size == 16);
+
        if(!(EVP_CIPHER_CTX_flags(ctx) & EVP_CIPH_CUSTOM_IV)) {
                switch(EVP_CIPHER_CTX_mode(ctx)) {
 
@@ -107,8 +127,10 @@ int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
        if(key || (ctx->cipher->flags & EVP_CIPH_ALWAYS_CALL_INIT)) {
                if(!ctx->cipher->init(ctx,key,iv,enc)) return 0;
        }
-       ctx->encrypt=enc;
+       if(enc != -1) ctx->encrypt=enc;
        ctx->buf_len=0;
+       ctx->final_used=0;
+       ctx->block_mask=ctx->cipher->block_size-1;
        return 1;
        }
 
@@ -139,36 +161,49 @@ int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
        return EVP_CipherInit(ctx, cipher, key, iv, 0);
        }
 
-
 int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
             unsigned char *in, int inl)
        {
        int i,j,bl;
 
+       if(ctx->buf_len == 0 && (inl&(ctx->block_mask)) == 0)
+               {
+               if(ctx->cipher->do_cipher(ctx,out,in,inl))
+                       {
+                       *outl=inl;
+                       return 1;
+                       }
+               else
+                       {
+                       *outl=0;
+                       return 0;
+                       }
+               }
        i=ctx->buf_len;
        bl=ctx->cipher->block_size;
-       *outl=0;
-       if ((inl == 0) && (i != bl)) return 1;
        if (i != 0)
                {
                if (i+inl < bl)
                        {
                        memcpy(&(ctx->buf[i]),in,inl);
                        ctx->buf_len+=inl;
+                       *outl=0;
                        return 1;
                        }
                else
                        {
                        j=bl-i;
-                       if (j != 0) memcpy(&(ctx->buf[i]),in,j);
+                       memcpy(&(ctx->buf[i]),in,j);
                        if(!ctx->cipher->do_cipher(ctx,out,ctx->buf,bl)) return 0;
                        inl-=j;
                        in+=j;
                        out+=bl;
-                       *outl+=bl;
+                       *outl=bl;
                        }
                }
-       i=inl%bl; /* how much is left */
+       else
+               *outl = 0;
+       i=inl&(bl-1);
        inl-=i;
        if (inl > 0)
                {
@@ -193,6 +228,16 @@ int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
                return 1;
                }
        bl=ctx->buf_len;
+       if (ctx->flags & EVP_CIPH_NO_PADDING)
+               {
+               if(bl)
+                       {
+                       EVPerr(EVP_F_EVP_ENCRYPTFINAL,EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH);
+                       return 0;
+                       }
+               *outl = 0;
+               return 1;
+               }
        n=b-bl;
        for (i=bl; i<b; i++)
                ctx->buf[i]=n;
@@ -204,45 +249,42 @@ int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
 int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
             unsigned char *in, int inl)
        {
-       int b,bl,n;
-       int keep_last=0;
+       int b;
 
-       *outl=0;
-       if (inl == 0) return 1;
+       if (inl == 0)
+               {
+               *outl=0;
+               return 1;
+               }
+
+       if (ctx->flags & EVP_CIPH_NO_PADDING)
+               return EVP_EncryptUpdate(ctx, out, outl, in, inl);
 
        b=ctx->cipher->block_size;
-       if (b > 1)
+       if(ctx->final_used)
                {
-               /* Is the input a multiple of the block size? */
-               bl=ctx->buf_len;
-               n=inl+bl;
-               if (n%b == 0)
-                       {
-                       if (inl < b) /* must be 'just one' buff */
-                               {
-                               memcpy(&(ctx->buf[bl]),in,inl);
-                               ctx->buf_len=b;
-                               *outl=0;
-                               return 1;
-                               }
-                       keep_last=1;
-                       inl-=b; /* don't do the last block */
-                       }
+               memcpy(out,ctx->final,b);
+               out+=b;
                }
-       if(!EVP_EncryptUpdate(ctx,out,outl,in,inl)) return 0;
+               
+       if(!EVP_EncryptUpdate(ctx,out,outl,in,inl))
+               return 0;
 
        /* if we have 'decrypted' a multiple of block size, make sure
         * we have a copy of this last block */
-       if (keep_last)
+       if (b > 1 && !ctx->buf_len)
                {
-               memcpy(&(ctx->buf[0]),&(in[inl]),b);
-#ifdef DEBUG
-               if (ctx->buf_len != 0)
+               if(!ctx->final_used)
                        {
-                       abort();
+                       *outl-=b;
+                       ctx->final_used=1;
                        }
-#endif
-               ctx->buf_len=b;
+               memcpy(ctx->final,&out[*outl],b);
+               }
+       else if(ctx->final_used)
+               {
+               ctx->final_used=0;
+               *outl+=b;
                }
        return 1;
        }
@@ -254,17 +296,24 @@ int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
 
        *outl=0;
        b=ctx->cipher->block_size;
+       if (ctx->flags & EVP_CIPH_NO_PADDING)
+               {
+               if(ctx->buf_len)
+                       {
+                       EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH);
+                       return 0;
+                       }
+               *outl = 0;
+               return 1;
+               }
        if (b > 1)
                {
-               if (ctx->buf_len != b)
+               if (ctx->buf_len || !ctx->final_used)
                        {
                        EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_WRONG_FINAL_BLOCK_LENGTH);
                        return(0);
                        }
-               if(!EVP_EncryptUpdate(ctx,ctx->buf,&n,ctx->buf,0)) return 0;
-               if (n != b)
-                       return(0);
-               n=ctx->buf[b-1];
+               n=ctx->final[b-1];
                if (n > b)
                        {
                        EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_BAD_DECRYPT);
@@ -272,7 +321,7 @@ int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
                        }
                for (i=0; i<n; i++)
                        {
-                       if (ctx->buf[--b] != n)
+                       if (ctx->final[--b] != n)
                                {
                                EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_BAD_DECRYPT);
                                return(0);
@@ -280,7 +329,7 @@ int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
                        }
                n=ctx->cipher->block_size-n;
                for (i=0; i<n; i++)
-                       out[i]=ctx->buf[i];
+                       out[i]=ctx->final[i];
                *outl=n;
                }
        else
@@ -294,12 +343,15 @@ int EVP_CIPHER_CTX_cleanup(EVP_CIPHER_CTX *c)
                {
                if(!c->cipher->cleanup(c)) return 0;
                }
+       OPENSSL_free(c->cipher_data);
        memset(c,0,sizeof(EVP_CIPHER_CTX));
        return 1;
        }
 
 int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *c, int keylen)
        {
+       if(c->cipher->flags & EVP_CIPH_CUSTOM_KEY_LENGTH) 
+               return EVP_CIPHER_CTX_ctrl(c, EVP_CTRL_SET_KEY_LENGTH, keylen, NULL);
        if(c->key_len == keylen) return 1;
        if((keylen > 0) && (c->cipher->flags & EVP_CIPH_VARIABLE_LENGTH))
                {
@@ -310,3 +362,30 @@ int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *c, int keylen)
        return 0;
        }
 
+int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *ctx, int pad)
+       {
+       if (pad) ctx->flags &= ~EVP_CIPH_NO_PADDING;
+       else ctx->flags |= EVP_CIPH_NO_PADDING;
+       return 1;
+       }
+
+int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr)
+{
+       int ret;
+       if(!ctx->cipher) {
+               EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL, EVP_R_NO_CIPHER_SET);
+               return 0;
+       }
+
+       if(!ctx->cipher->ctrl) {
+               EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL, EVP_R_CTRL_NOT_IMPLEMENTED);
+               return 0;
+       }
+
+       ret = ctx->cipher->ctrl(ctx, type, arg, ptr);
+       if(ret == -1) {
+               EVPerr(EVP_F_EVP_CIPHER_CTX_CTRL, EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED);
+               return 0;
+       }
+       return ret;
+}